CVE-2019-13720

Katalog CVE

CVSS 8.8 · High KEV · sudah dieksploitasi EPSS 49,4%

Kerentanan Use After Free pada google chrome, opensuse leap. Skor CVSS 3.1 8.8 (High) menurut NVD. Masuk katalog KEV CISA pada 23 Mei 2022, artinya sudah terbukti dieksploitasi.

Deskripsi (NVD)

Use after free in WebAudio in Google Chrome prior to 78.0.3904.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Rincian

Terbit di NVD

25 November 2019

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

8.8 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-416: Use After Free

EPSS (30 hari)

49,4% peluang dieksploitasi; lebih tinggi dari 98,8% CVE lain

Known Exploited Vulnerabilities (CISA)

Nama

Google Chrome WebAudio Use-After-Free Vulnerability

Masuk KEV

23 Mei 2022

Tenggat CISA

13 Juni 2022 (untuk instansi federal AS)

Ransomware

Belum tercatat

Tindakan wajib

Apply updates per vendor instructions.

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://chromereleases.googleblog.com/2019/10/stable-channel-update-for-desktop_31.html advisory vendor
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-13720 pemerintah AS
• http://lists.opensuse.org/opensuse-security-announce/2019-12/msg00022.html mailing list · advisory pihak ketiga
• http://packetstormsecurity.com/files/167066/Google-Chrome-78.0.3904.70-Remote-Code-Execution.html exploit · advisory pihak ketiga · vdb entry
• https://security.gentoo.org/glsa/202004-04 advisory pihak ketiga
• https://crbug.com/1019226 permissions required